CVE-2026-56864Suited to automated attack · CISA
Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb
CVSS score
7.5
EPSS probability
%0.3
Risk score
0.0
Published
2 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.8
CVE-2026-27140
Code execution vulnerability in SWIG code generation in cmd/go
GT
Patch verifiedEPSS %1
7.8
CVE-2025-61731
Arbitrary file write using cgo pkg-config directive in cmd/go
GT
Patch verifiedEPSS %1
8.6
CVE-2025-61732
Potential code smuggling via doc comments in cmd/cgo
GT
Patch verifiedEPSS %1
8.4
CVE-2026-56865
Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog
GT
Patch status unknownEPSS %0
7.8
CVE-2026-94447
Checksum database bypass for golang.org/toolchain in cmd/go
GT
Patch verifiedEPSS %0
7.8
CVE-2026-94444
Checksum bypass for golang.org/fips140 in cmd/go
GT
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-56864"